Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-3209

Низкий

ALT-PU-2020-3209: package sddm update to version 0.18.1-alt10

Источник
errata.altlinux.org
Дата публикации
05.11.2020
Дата обновления
05.11.2020
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades sddm to version 0.18.1-alt10.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 6.3
ubuntu
около 6 лет назад

An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server without providing proper authentication. A local attacker can thus access X server display contents and, for example, intercept keystrokes or access the clipboard. This is caused by a race condition during Xauthority file creation.

CVSS3: 6.3
nvd
около 6 лет назад

An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server without providing proper authentication. A local attacker can thus access X server display contents and, for example, intercept keystrokes or access the clipboard. This is caused by a race condition during Xauthority file creation.

CVSS3: 6.3
debian
около 6 лет назад

An issue was discovered in SDDM before 0.19.0. It incorrectly starts t ...

suse-cvrf
около 6 лет назад

Security update for sddm

CVSS3: 6.3
github
больше 4 лет назад

An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server without providing proper authentication. A local attacker can thus access X server display contents and, for example, intercept keystrokes or access the clipboard. This is caused by a race condition during Xauthority file creation.